Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.1
    SUSE-SU-2026:0560-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.3 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-…

    first Feb 16, 2026
  • High max 8.1

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.16 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Do…

    first Feb 16, 2026
  • High max 8.1
    SUSE-SU-2026:0554-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.51 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-ti…

    first Feb 16, 2026
  • High max 8.1

    Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.70 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Do…

    first Feb 16, 2026
  • High max 8.1

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.65 fixes various security issues The following security issues were fixed: - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480). - CVE-2025-40129: sun…

    first Feb 16, 2026
  • High max 8.1
    SUSE-SU-2026:0548-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.47 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu…

    first Feb 16, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.121 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potentia…

    first Feb 15, 2026
  • High max 7.8
    SUSE-SU-2026:0539-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.103 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potentia…

    first Feb 15, 2026
  • High max 7.8
    SUSE-SU-2026:0535-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.113 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potentia…

    first Feb 15, 2026
  • High max 7.8
    SUSE-SU-2026:0528-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.97 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potential…

    first Feb 15, 2026
  • High max 7.8
    SUSE-SU-2026:0526-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.147 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potentia…

    first Feb 14, 2026
  • High max 8.1

    Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.275 fixes one security issue The following security issue was fixed: - CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439). The following non security issue w…

    first Feb 14, 2026
  • High max 8.1

    Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.272 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-40186: tcp: Don't call reqsk_fastopen_…

    first Feb 14, 2026
  • High max 8.1
    SUSE-SU-2026:0521-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.261 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38352: posix-cpu-timers: fix race betw…

    first Feb 14, 2026
  • High max 8.1
    SUSE-SU-2026:0518-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 64 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.244 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38352: posix-cpu-timers: fix race betw…

    first Feb 14, 2026
  • High max 8.2

    Security update for protobuf

    This update for protobuf fixes the following issues: - CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).

    first Feb 14, 2026
  • High max 8.1
    SUSE-SU-2026:0515-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.247 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38352: posix-cpu-timers: fix race betw…

    first Feb 13, 2026
  • High max 7.5

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - CVE-2026-21925: Fixed a vulnerability in the Oracle Java SE component RMI. (bsc#1257034) - CVE-2026-21932: Fixed a vulnerability in the Oracle Java SE component AWT and JavaFX. (bsc#1257036) - C…

    first Feb 13, 2026
  • High max 8.1

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976). - CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962). - CVE-2026-23952: pr…

    first Feb 13, 2026
  • High max 8.4

    Security update for glibc-livepatches

    This update for glibc-livepatches fixes the following issues: - CVE-2026-0861: Fixed that inadequate size check in the memalign suite may result in an integer overflow (bsc#1256913)

    first Feb 13, 2026
  • High max 7.5

    Security update for openssl1

    This update for openssl1 fixes the following issues: - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-6…

    first Feb 13, 2026
  • High max 8.6

    Security update for libsoup2

    This update for libsoup2 fixes the following issues: - CVE-2026-1761: Check length of bytes read in soup_filter_input_stream_read_until to avoid a stack-based buffer overflow (bsc#1257598). - CVE-2026-0716: improper bounds handling may allow out-of-bounds rea…

    first Feb 13, 2026
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594). - CVE-2025-38129: page_pool: fix …

    first Feb 13, 2026
  • High max 8.8

    Security update for curl

    This update for curl fixes the following issues: - CVE-2023-27534: Regression fix for SFTP path ~ resolving discrepancy (bsc#1219273)

    first Feb 13, 2026
  • High max 8.1

    Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.16 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don…

    first Feb 13, 2026
  • High max 8.1
    SUSE-SU-2026:0489-1 4 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.8 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). -…

    first Feb 13, 2026
  • High max 8.1
    SUSE-SU-2026:0487-1 5 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.3 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-t…

    first Feb 13, 2026
  • High max 7.5

    Security update for python-azure-core

    This update for python-azure-core fixes the following issues: - CVE-2026-21226: Fixed deserialization of untrusted data which may allow an authorized attacker to execute code over a network. (bsc#1257703)

    first Feb 12, 2026
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594). - CVE-2025-38129: page_pool: fix inc…

    first Feb 12, 2026
  • High max 7.1

    Security update for python-wheel

    This update for python-wheel fixes the following issues: - CVE-2026-24049: Fixed absent path sanitization can cause arbitrary file permission modification (bsc#1257100).

    first Feb 11, 2026
  • High max 8.9

    Security update for python-urllib3

    This update for python-urllib3_1 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in th…

    first Feb 11, 2026
  • High max 7.5

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - CVE-2026-21925: Fixed a vulnerability in the Oracle Java SE component RMI. (bsc#1257034) - CVE-2026-21932: Fixed a vulnerability in the Oracle Java SE component AWT and JavaFX. (bsc#1257036) - C…

    first Feb 11, 2026
  • High max 7.5

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2025-14550: Fixed potential denial-of-service via repeated headers when using ASGI(bsc#1257403) - CVE-2026-1312: Fixed potential SQL injection via QuerySet.order_by and FilteredRelation (bsc#1257…

    first Feb 11, 2026
  • High max 7.8

    Security update for gimp

    This update for gimp fixes the following issues: - CVE-2026-0797: Fixed a heap-based buffer overflow in the parsing of ICO files. (bsc#1257549)

    first Feb 11, 2026
  • High max 7.5

    Security update for apptainer

    This update for apptainer fixes the following issues: Security fixes: - CVE-2024-45310: Fixed runc being tricked into creating empty files/directories on host (bsc#1257432) - CVE-2025-65105: Fixed security bypass due to disabling security options (bsc#1255462…

    first Feb 11, 2026
  • High max 8.1

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-22770: improper pointer initialization can cause denial of service (bsc#1256969). - CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976). - CVE-2026-23876: m…

    first Feb 11, 2026
  • High max 8.1

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-22770: improper pointer initialization can cause denial of service (bsc#1256969). - CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976). - CVE-2026-23876: m…

    first Feb 11, 2026
  • High max 7.5

    Security update for nodejs20

    This update for nodejs20 fixes the following issues: - Update to 20.20.0: - CVE-2026-22036: Updated undici to 6.23.0 (bsc#1256848) - CVE-2025-59465: Add TLSSocket default error handler (bsc#1256573) - CVE-2025-55132: Disable futimes when permission model is e…

    first Feb 11, 2026
  • High max 8.4

    Security update for gpg2

    This update for gpg2 fixes the following issues: Security fixes: - CVE-2026-24882: Fixed stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396) - Fixed GnuPG accepting Path Separators and Path Traversals in Literal Data 'F…

    first Feb 11, 2026
  • High max 8.6

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-1536: Always validate the headers value when coming from untrusted source to avoid HTTP header injection. (bsc#1257440) - CVE-2026-1761: Check length of bytes read in soup_filter_input_stream_read…

    first Feb 11, 2026